Only for candidates in Argentina or Uruguay. We are looking for a Infosec Governance, Risk, and Compliance Specialist for one of our clients teams. They are expanding their Information Security team and they are looking for an energetic and self-motivated Infosec GRC Specialist to join the global Infosec team. You will be tasked with leading our compliance initiatives across Data Privacy, PCI, Sarbanes-Oxley ITGCs, and SOC2. Responsibilities: Lead and oversees strategic GRC programs and projects, from concept/definition through planning, execution, delivery, and adoption Coordinate compliance projects with key stakeholders throughout the company including Legal, Internal Audit, IT & Information Security, and Engineering Build and maintain a unified information security control framework that will meet Control requirements across PCI, SOC2, ISO 27001, NIST CSF, GDPR, CCPA, and other relevant global data privacy regulations. Create and lead our internal vendor risk management program Attend regular cross departmental security meetings as the GRC point of contact Ensure that cyber security risks are logged, tracked and scored in accordance with Risk Management Policy Take ownership of the cyber risk register and track risks through the remediation phase with key stakeholders in Engineering, IT, and Business Applications. Create, update and maintain GRC Policy & Procedures Prepare cyber risk reports and metrics to communicate the security posture for Executives and Board of Directors. Basic Qualifications: A Bachelor’s degree or higher or equivalent work experience 5+ years of experience managing IT Risk & Compliance Programs Excellent written and verbal communication skills. Strong technical project management experience. Experience mapping unified controls across common security frameworks Experience with GRC Tools such as ZenGRC, OneTrust, Pathlock, Riskonnect, AuditBoard, etc. Knowledge of Security Frameworks including ISO27001, SOC2, Data Privacy (GDPR, CCPA), NIST CSF, and PCI Experience implementing repeatable processes and driving automation or standardization Ability to work across different levels in the organization from Individual contributor to C-Level Executives. Strong analytical and problem solving skills Bonus: IT Audit Background Experience in a global organization Experience in building 3rd Party/Vender Risk Programs